vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(albok-service): 0.1.24 (unit 6 encrypted-wing deferral) + personal/sealed wing in albok.yaml

Browse Source
This commit is contained in:
vh
2026-10-16 09:18:28 -07:00
parent 76e7a76ad9
commit 507d62d62a
4 changed files with 18 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stacks/albok-service/conf/albok.yaml.template
+5 -1
View File
@@ -35,7 +35,7 @@ listen:
port: 8390 # container port; published on the host as 8392 (8390 is the post office)
# First instance, per albok-dev's ask (2026-10-02): fleet/{memory,stash}, personal/notes.
# 2026-10-03: + personal/agent-feedback (restricted, gid 1512). The vault wing comes later (gid 1513+).
# 2026-10-03: + personal/agent-feedback (restricted, gid 1512). 2026-10-16: + personal/sealed (unit 6, encrypted, gid 1513; albok-service 0.1.24+).
buildings:
- id: fleet
default_group: albok-read # host gid 1510
@@ -53,6 +53,10 @@ buildings:
- id: agent-feedback # auto-memory (Nemi's third source); restricted, default-deny (2026-10-03)
restricted: true
group: albok-feedback # host gid 1512
- id: sealed # unit 6: the first encrypted wing (LUKS2 /srv/albok/luks/personal.sealed.img; key vault albok/wing-key-personal-sealed)
restricted: true
group: albok-sealed # host gid 1513
encrypted_mount: /srv/albok/sealed/personal.sealed
- id: library # unit 4.5 (Nemi books), albok-dev ask 2026-10-09: epubs from nh3-dev ~/library
default_group: albok-read # host gid 1510, readable like fleet; neither wing restricted, no encrypted mount
wings: